[OpenAFS] Passwordless login through ssh on krb5/afs enabled
workstation.
Alexander Al
alexander@scred.nl
Thu, 08 Mar 2007 11:46:39 +0100
Simon Wilkinson wrote:
> On 8 Mar 2007, at 10:16, Alexander Al wrote:
>
>> Is there a possibility that you can use the authorized keys with ssh?
>
> The problem is that ssh's authorized keys authentication mechanism
> has no way of getting you a Kerberos ticket, and therefore, no way of
> getting you an AFS token in order to access your files. You'll need
> to explicitly kinit and aklog once you've logged in.
>
> Of course, if you have Kerberos on the machine you're connecting
> from, you can use Kerberos to give you passwordless login, forwarding
> your tickets to your workstation, and then have a PAM module get your
> AFS tokens as part of the login process.
Thanks.
Very Helpfull.
I'll tell the user : "can't" (because he is connecting from outside.)
regards
Alexander.
--
Alexander Al
Leiden, Die Niederlande